Extracted

Extracted

• • Target

    Setup.exe

  • Size

    800.0MB

  • MD5

    b4d4d19863fd8b7b64e2e8a1204aac62

  • SHA1

    64d1609b82e6054af14412a92724d8605b7d015d

  • SHA256

    56375ce34ece830c6770d768f1ed501a78c359a380c9576274dbbd19c9ef5aa3

  • SHA512

    e00fa8b5af32b334849e499f5f0be5a23aeb37ab2b28d2bf82cee2766d85c3fb1a874cd327467ebdd57475b2b42befb7507d2d6ac923020964e23f0a3f5a7bff

  • SSDEEP

    24576:KjatNrAGDrHrmxAztbD6Lf5aytZI9FmLaQWnnZp/fh+AR9wLsS9qB3Hcxx1VmLHA:PUGnHRbEau4FmUZpYARuISsV+VmLHRQl

  Score

  10^/10

  lummadiscoverystealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Lumma family

    lumma

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2